Nortel Networks 2300 Series manual Set service-profile attr

316AP Commands

set service-profile attr

Configures authorization attributes that are applied by default to users accessing the SSID managed by the service profile. These SSID default attributes are applied in addition to any supplied by the RADIUS server or from the local database.

Syntax set service-profile name attr attribute-name value

name	Service profile name.
attribute-name value	Name and value of an attribute you are using to authorize SSID
	users for a particular service or session characteristic.
	For a list of authorization attributes and values that you can
	assign to network users, see Table 29 on page 198. All of the
	attributes listed in Table 29 can be used with this command
	except ssid.

Defaults By default, a service profile does not have any authorization attributes set. Access Enabled.

History Introduced in WSS Software 4.1.

Usage To change the value of a default attribute for a service profile, use the set service-profile attr command and specify a new value.

The SSID default attributes are applied in addition to any attributes supplied for the user by the RADIUS server or the local database. When the same attribute is specified both as an SSID default attribute and through AAA, then the attribute supplied by the RADIUS server or the local database takes precedence over the SSID default attribute. If a location policy is configured, the location policy rules also take precedence over SSID default attributes. The SSID default attributes serve as a fallback when neither the AAA process, nor a location policy, provides them.

For example, a service profile might be configured with the service-typeattribute set to 2. If a user accessing the SSID is authenticated by a RADIUS server, and the RADIUS server returns the vlan-nameattribute set to orange, then that user will have a total of two attributes set: service-typeand vlan-name.

If the service profile is configured with the vlan-nameattribute set to blue, and the RADIUS server returns the vlan-nameattribute set to orange, then the attribute from the RADIUS server takes precedence; the user is placed in the orange VLAN.

You can display the attributes for each connected user and whether they are set through AAA or through SSID defaults by entering the show sessions network verbose command. You can display the configured SSID defaults by entering the show service-profilecommand.

Examples The following command assigns users accessing the SSID managed by service profile sp2 to VLAN blue:

WSS# set service-prof sp2 attr vlan-name blue

success: change accepted.

NN47250-100 (Version 02.51)